Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
e824250bb617588bda8e8cfbb4edc733_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
e824250bb617588bda8e8cfbb4edc733_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
e824250bb617588bda8e8cfbb4edc733_JaffaCakes118
Size
201KB
MD5
e824250bb617588bda8e8cfbb4edc733
SHA1
3e2333799b1ba9eb0e2a4271efbbeb1d510faa92
SHA256
11adc71430bd3c67cdd6fccaf39a9a78d229ba0511df744be635e93900320de2
SHA512
9bf70ebfdad9e82c6fa1f4d8eb7b4a7761164d1f169cb47538a154955ed2316af1265426f19fb4ae92b6160cab2bbe1794b94d494eb0a38733527ace340ed645
SSDEEP
6144:KhNKtMwhyJZwaGT4i7CJQXtoMc5cpe/5h:KEMQeLpudo/v
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
GetConsoleMode
PeekNamedPipe
GetCurrentProcess
WaitForSingleObject
GetTickCount
WriteFile
InitializeCriticalSection
LeaveCriticalSection
ReadFile
GetTimeZoneInformation
CreateFileW
GetOverlappedResult
GetLastError
EnterCriticalSection
ResetEvent
OpenThread
GetFileType
CreateEventW
SetFilePointerEx
CancelIo
FindNextFileW
OpenEventW
DeleteCriticalSection
CloseHandle
GetMailslotInfo
GetProcAddress
GetDiskFreeSpaceW
LoadLibraryA
FreeLibrary
SleepEx
GetModuleHandleW
LoadLibraryW
GetModuleFileNameW
DisableThreadLibraryCalls
GetModuleFileNameA
CreateThread
SetStdHandle
WaitForMultipleObjects
GetCommandLineA
GetConsoleCP
FlushFileBuffers
GetStringTypeW
Sleep
EncodePointer
DecodePointer
RtlPcToFileHeader
RaiseException
WriteConsoleW
GetCurrentThreadId
RtlLookupFunctionEntry
RtlUnwindEx
InitializeCriticalSectionAndSpinCount
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
HeapSize
GetStdHandle
HeapFree
HeapAlloc
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetProcessHeap
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
LoadLibraryExW
HeapReAlloc
OutputDebugStringW
LCMapStringW
RegQueryValueExA
RegOpenKeyExA
StringFromIID
CoTaskMemFree
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ